Funnel accounts: how banks spot them

As of September 2026: The FinCEN advisory quoted here was issued in 2014. It is guidance, not a statute, and this page describes it as written. Check FinCEN's advisory archive for later updates.

A funnel account is a bank account that collects cash deposits in one region and is drained in a different region soon after. FinCEN, the US financial crimes regulator, defines it as an individual or business account in one geographic area that receives multiple cash deposits, often below the cash reporting threshold, and from which the funds are withdrawn in a different geographic area with little time between the deposits and withdrawals. Banks spot funnel accounts by looking at where the money goes in and where it comes out.

Why the pattern arose

In June 2010, the Mexican government announced rules limiting deposits of US cash in Mexican banks. Several months later it extended the limits to exchange houses (casas de cambio) and brokerages. FinCEN’s 2014 advisory says that in 2011 and 2012 it had already warned banks about the rise of “funnel account” use (also called interstate or out-of-state funnel activity) after those restrictions.

The 2014 update added a second point. Mexico-related criminal groups were still using funnel accounts, and were also using them to pay for goods that were shipped abroad and sold, a version of trade-based money laundering. For that side of the story, see the black market peso exchange page.

How it differs from a money mule and from structuring

These three ideas overlap, so it helps to separate them.

Structuring is about the size of each deposit. Amounts are kept under a reporting threshold. A funnel account often involves that, but structuring alone can happen at a single branch.

A money mule is about the person. It is someone who lets criminal money pass through their own account. Mules usually receive electronic transfers from fraud victims. The money mules and funnel accounts page covers that in full.

A funnel account is about geography and speed. The defining feature is a gap: deposits land in one place and withdrawals happen somewhere far away, quickly. The account holder can be a mule, a business owner, or someone who was paid to open it. A single account can show all three traits at once.

The red flags FinCEN lists

The advisory lists red flags for a funnel account tied to trade-based laundering. Each one is a signal for a bank analyst, not proof of a crime:

• An account opened in one state (typically along the Southwest border) receives multiple cash deposits under $10,000 from unidentified people at branches outside the region where the account is based.
• For a business account, the deposits happen far from where the business operates. FinCEN’s example is a Southern California produce company receiving small cash deposits at branches in Chicago, Indianapolis, and Minneapolis.
• If questioned, the people opening the account or making deposits know little about the business, the account holder, or the source of the cash. FinCEN notes that criminal groups sometimes pay outsiders such as students, itinerant workers, or the unemployed to do this.
• Payments out of a business account do not fit the stated business. FinCEN’s example is a produce company’s checks going to a leather goods seller, or a wire going to a textile maker in China.
• Checks from the account appear to have different handwriting on the payee and amount lines than on the signature line.
• Wires or checks from the account are deposited into, or clear through, the US correspondent account of a Mexican bank.

FinCEN also stresses that some of these flags can be legitimate activity. No single one is a clear sign of laundering, so banks should weigh them together with what they expect from that customer.

A bank’s-eye view: how one gets found

Picture an analyst reviewing an alert. Here is the walkthrough, based on the advisory’s red flags.

1. Start with the profile. What did the customer say they do, and where? A local business has a home footprint. Deposits well outside it are the first anomaly.
2. Map the deposits. Plot the branches where cash arrived. One account fed from many states, by people who are not the account holder, stands out on a map in a way a spreadsheet hides.
3. Check the clock. Look at the time between deposit and withdrawal. Ordinary accounts build up a balance and spend it. A funnel account balance keeps snapping back toward zero.
4. Test the outflows. Do the payments make sense for the stated business? Payees in unrelated industries, or checks that look pre-signed, are the kind of mismatch FinCEN describes.
5. Look for consolidation. FinCEN observed several funnel accounts sending money into a single consolidated account before withdrawal. That means one confirmed account can lead to others.
6. Decide and report. If the bank knows, suspects, or has reason to suspect the activity involves illegal funds or lacks a lawful purpose, it may be required to file a suspicious activity report (SAR). For this pattern, FinCEN asked banks to include the key terms “Funnel Account,” “TBML,” and, for the Mexico link, “MX Restriction” in the SAR narrative and information sections, so analysts can search for them later.

FinCEN also tells banks to manage the risk of taking cash deposits from non-customers and unidentified parties, which is the door funnel accounts use. Automated tools do steps 1 to 4 at scale; see transaction monitoring and suspicious activity reporting for how that works.

Related cases

Funnel accounts rarely appear under that name in enforcement records, so no case here is labeled one. Two cases on this site show related failures. In the TD Bank case, one network’s US deposits were withdrawn quickly at ATMs in Colombia, laundering about US$39 million, and the DOJ said bank employees helped. In the Wachovia case, a 2010 deferred prosecution agreement followed the bank’s failure to monitor large flows tied to Mexican exchange houses. Both show what happens when a bank does not examine where money enters and leaves.